$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ONjM10ydN7-5aD_fAH9QKA7g9TI.roa File: ONjM10ydN7-5aD_fAH9QKA7g9TI.roa (raw, json) Hash identifier: NNywfh15fLnNDW6zS/8Plmc4nxuvXXzP12KlEhhiNpg= Subject key identifier: 38:D8:CC:D7:4C:9D:37:BF:B9:68:3F:DF:00:7F:50:28:0E:E0:F5:32 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2807 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ONjM10ydN7-5aD_fAH9QKA7g9TI.roa Signing time: Fri 01 Sep 2023 10:04:51 +0000 ROA not before: Fri 01 Sep 2023 10:04:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10247 (0x2807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=38D8CCD74C9D37BFB9683FDF007F50280EE0F532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0e:fd:96:2a:bb:40:cc:c2:de:75:83:5f:ca: fe:6f:1e:d3:62:0a:d6:a5:07:eb:f2:16:6c:be:26: 41:f3:20:83:f5:d5:9d:05:4f:91:c8:78:ed:4a:b8: 18:c0:23:77:44:ba:41:7c:2f:86:75:0a:f1:06:ad: e0:c1:b4:13:1b:d8:c1:3f:eb:7a:0a:b9:ac:3b:2c: 63:0c:13:2f:23:c0:00:d6:3b:f2:a0:df:75:f0:f3: 4e:e8:f3:9e:e7:5c:db:1c:b3:74:7d:84:fc:4c:51: 7f:48:45:7a:b9:75:d4:36:17:72:0d:51:17:9f:15: 78:3b:ea:ba:c4:09:5b:f7:1d:74:40:0d:0e:d4:02: 0f:9d:2b:ec:6a:3a:46:50:06:65:5c:fe:60:fd:ec: 65:60:0b:92:3e:e8:79:20:96:26:19:87:1e:8c:dd: ce:12:a8:91:51:a0:1d:a8:31:0e:ac:c1:3f:a5:77: 95:d6:88:7c:ce:fd:87:4d:d9:1e:b2:70:41:61:49: 28:7e:d1:6a:d7:20:84:81:ab:d2:17:45:ac:0c:1e: 45:dd:65:d7:2d:01:0f:a7:45:f7:da:48:a0:6a:97: 0a:04:1b:91:a8:c9:38:81:4d:64:07:60:90:e6:c4: 37:58:9f:69:be:52:26:88:69:9e:e2:d4:19:86:fb: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:CC:D7:4C:9D:37:BF:B9:68:3F:DF:00:7F:50:28:0E:E0:F5:32 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ONjM10ydN7-5aD_fAH9QKA7g9TI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.133.0/24 Signature Algorithm: sha256WithRSAEncryption b3:88:3b:32:4e:09:b4:41:e0:67:9e:b0:fd:c7:77:e8:6e:3c: 73:bf:be:79:2d:bf:2f:11:cd:cc:21:10:0e:2a:04:29:27:f7: e2:41:05:e1:d6:06:56:f5:f1:6c:bd:70:26:3c:2f:b4:e8:53: 29:60:f9:4a:21:11:55:ff:ee:b6:7e:ed:e2:0b:c9:98:ce:bc: 20:d0:07:a2:df:30:19:74:f0:d5:a6:cf:51:c2:23:b8:1e:b1: f7:d7:4e:98:f2:72:5e:39:c4:7b:f1:f3:08:60:5e:13:e6:77: 1d:6a:bd:fd:18:32:cb:71:08:46:41:4c:f5:e2:49:6a:0e:00: 98:45:7e:20:81:85:a7:10:01:e5:c3:9b:e9:3f:48:e0:af:53: 79:7d:76:bc:55:ec:02:22:f3:68:bd:d3:67:db:7d:a9:06:c6: b2:52:69:07:7c:7e:42:db:3a:d7:71:41:0b:d1:f1:c2:1c:94: dd:c8:68:72:cb:ec:de:bf:45:85:22:d5:7b:4c:48:86:05:c8: 15:3d:07:c5:5f:01:84:c5:7e:85:8a:7b:a0:76:2e:63:9f:4b: 17:04:af:17:26:56:83:6a:98:9a:0d:4d:b8:7a:e8:5b:1d:33: 42:4d:cd:96:35:fa:1a:5c:61:41:a0:77:68:94:83:2a:5b:db: d9:28:3b:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM4RDhDQ0Q3NEM5RDM3 QkZCOTY4M0ZERjAwN0Y1MDI4MEVFMEY1MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfDv2WKrtAzMLedYNfyv5vHtNiCtalB+vyFmy+JkHzIIP11Z0F T5HIeO1KuBjAI3dEukF8L4Z1CvEGreDBtBMb2ME/63oKuaw7LGMMEy8jwADWO/Kg 33Xw807o857nXNscs3R9hPxMUX9IRXq5ddQ2F3INURefFXg76rrECVv3HXRADQ7U Ag+dK+xqOkZQBmVc/mD97GVgC5I+6HkgliYZhx6M3c4SqJFRoB2oMQ6swT+ld5XW iHzO/YdN2R6ycEFhSSh+0WrXIISBq9IXRawMHkXdZdctAQ+nRffaSKBqlwoEG5Go yTiBTWQHYJDmxDdYn2m+UiaIaZ7i1BmG+w6zAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUONjM10ydN7+5aD/fAH9QKA7g9TIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09Oak0xMHlkTjctNWFEX2ZB SDlRS0E3ZzlUSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYUwDQYJKoZIhvcNAQELBQADggEBALOIOzJOCbRB4GeesP3Hd+huPHO/vnktvy8R zcwhEA4qBCkn9+JBBeHWBlb18Wy9cCY8L7ToUylg+UohEVX/7rZ+7eILyZjOvCDQ B6LfMBl08NWmz1HCI7gesffXTpjycl45xHvx8whgXhPmdx1qvf0YMstxCEZBTPXi SWoOAJhFfiCBhacQAeXDm+k/SOCvU3l9drxV7AIi82i902fbfakGxrJSaQd8fkLb OtdxQQvR8cIclN3IaHLL7N6/RYUi1XtMSIYFyBU9B8VfAYTFfoWKe6B2LmOfSxcE rxcmVoNqmJoNTbh66FsdM0JNzZY1+hpcYUGgd2iUgypb29koOyY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:05 2024 by rpki-client on console-ams.rpki-client.org